3 ms·
> not to mention tamper with Modifying the SNI hostname in transit is pointless - the client still knows what hostname they sent. Changing the SNI hostname wou
by Aaron1011 10y ago
> not to mention tamper with
Modifying the SNI hostname in transit is pointless - the client still knows what hostname they sent. Changing the SNI hostname would only cause the server to send back a different certificate, which would immediately be noticed by the client.
- gwu78 10y agoAnd break the connection. Mission accomplished.
- deathanatos 10y agoIf you can tamper with the connection and "breaking the connection" is "Mission accomplished", SNI isn't going to make any difference. You can just drop all the packets, and be done w/ it.
- openasocket 10y agoThe ISP owns the transit of traffic between the client and the server. If they want to block people from accessing certain places they can just block it at the ip layer with packet filtering. Why would they go through all this rigmarole with mangling SNI data?
- deleted 10y ago[deleted]